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mm* 

tf>fcS&8g&JiV\ v = F (g, -s) &»fc*/«£-;£faffiBS»F#£«>e>*l 

t&SBHW#fl!l$iatta«a Sr^L, Bg#A = |»ifcF (g, a) &Hg 
# A & $|$E # W^S fC*IM b > 

t«riH«3E#«isiatifai»cbS:^b, bip^b=s5is:f (g, b) tm^x=m 

WCF (A, b) §£f§#B, X £$Et£#«|giC^fB U 

iU§BIIB^#M^Stt, R£#X = |»ifcF (B, a) ©W^©/Sim&&3iEU « 
5i*Si:fciEb&i:£lc, SL»c&£/£U Rt#C = IMF (g, c) 2fctfl©# 
Y=mmF (B, c) fc, *fcttB|p-^C = M»F (A, c) RXftg^Y = &&F 

(x, c) t % m^z=mmH (a, y, s) nz^&b. &&m^zik&mwm 
mtmummmmimnY =mmF cc, b> %.z$m^A=Mmj u, y, 

g, Z) <Z>2^®M&#HII$£/*5ibfcfc£tC, i«g3^§E#«g h TtuiBM# 
[ff#£2] (q | p-l) <DM&*mt=.-tmm.P, qt, fi«q©5SS: 

1 ©3-ifSglE^. 

v = F (g, — s ) = g mod p 

X=B a mod p 
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<d m&tfi&iL l tc t £ fc $m c & -r s z £ & mm t -r & z £ & mm £ -t s m 

H (a, Y, s) = a+ Ys mod q 

<d & * -r z> z t & mm £ -r s ^ t & ^ -r £ 1 © ^ - v mu^m. 

Y Z 

J (v, Y, g, Z) =v g mod p 

<D M& & M £ r h £ £ ir Z> Z £ & mm £ -t Z> W 1 <Z> 3. - if SfE^iSfe. 
»fc«8Rg v = F (g, -s) &i»fc't*£-;£faffiW»F#£&&;ri 

, £ mm<z>&u#mmm £ <d mxummmmm £ ^ummmm<D m 

mm b t=.wmum%wmmiz &^xm&M u i>rtBfcSB»0£#T?3& ^ x. t&fBtEH^ 

SLifca Bf#A=B5IS[F (g, a) ^Bgf^A£*fc$E# 

^mztifcm^B, xizm-3^x. m-%x=mm.F (b, a) om&o&il®. 

(g, c) &OT?#Y = g§ffcF (B, c) ££&Bif#C = IWi&F (A, c) 
&t>*Rt^Y=MifcF (X, c) £, m^Z=mmH (a, Y, s) ££^#>£i± 

[M«8] E^f fifiO^Hi v s £<DMmz-D^T^ibfe 

*fe^g$:Mv^, v = f (g, -s) zmfc-r^g-jjfa&mmFtffe&bn 
> ii^mus i: mmntkummmw. £ <z> mxuwmmmm £ &ummmm <d m 
& iz o v % t <d sE m& z mm. -r & - -tf (d r=. m <d ^m^mmmm u y =? a & 
mm l tc iff tB^iiE#{i!fMS k. & v * t m & m y «ti§ & mmrnfa x $> o x > tfjiH^n 
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m&ummmmmfr e> a & %m £ 

IF (g, b) £.m j %X = MWF (A, b) StBff#B, X £§EBJ!#$!i£ 

t9iBliEW#«fS«^e>©Bgp^C = l8»F (g, c) &tF«P^Y = S8»F (B, 
c) £fcttl«#C=g§»F (A, c) Y F (X, c) Rff 

#Z=H€j&H (a, Y, s) ^fc^fl^-fr, 

£fiS*lfcl*#C, Y, ZIC|£-5V*T, «F#Y=W»F (C, b) &t>*lf#A 

= fW$fcJ (v, Y, g, z) ©2o©B8^H^jCfiK3iLfci:S»c, irjfB*l§E# 
ftfcSEStg&Mvx, v = F (g, -s) &»fc-r^£-:£lRJttW»F#5£tf>&;fl 

^ tc o v * t ©iE mhs & z> - if fgfE<z> & (Dum^wmmm e> ^ - if mm. 

' f§L«a Sr^L^oBiP^A = B5jRF (g, a) 3fc#3 £Hf# A £4slSE# 

&feS*lfc«F#B, XtC3£"3V*T, Bi^X = BgiS[F (B, a) <DK#©^itffi 

, c) ^t>*Bi#Y = MiS[F (b, c) tr=.itm^c = mmF (a, C ) 

Blr#Y=ggmF (X, c) f©#Z=B§i£H (a, Y, s) £&3fc#)£Hg#?ft 

m^mi o] mmmmmntemmv tm&m s ^m^ico^t^ 

5£«>fc«E8tg v = F (g, -s) SrSilfe-r^^-^lRlffiMSRF^tte, 
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K o V n X <D IE a ffi S *£§E -T £ 3. - if ggfE <D tc ft © ^HE#««ffl CD 3. - if fg 

ussiest, 

ws[F (g, b) tm^x=mmF (a, b) sr^ftr, mm^B, xzuwm 

SSf33IEW#iW«a^e)©Bgp#C = BI«F (g, c) &tfffiF-SfY = |S«F (B, 
c) £. $.r=.l$m j %C = M®lF (A, c) &tfl£#Y = W»F (X, c) HgP 

^z=mmn (a, y, s) fc&^-rsBiP-^SM^m^, 
%mznr=.m^c, y, zics^t, y = f cc, b) &tfit^A 

= MU (v, Y, g, Z) <D2^©W##HB£jcj££Lfc££K:, gffIB^IE# 
JtftfcBESSCg&Mv^ v = F (g, -s) feiftfcf ^£-;£iaM$W«F#£fte> 

m m i c o v n t © ie m « s « se -r e a. - if n m. ^ x ^ a tc & v * x , 

SL«a &£/*l/rt^l®#A = |§»F (g, a) £#ft, ^ft £fHr# A £4£§E# 

ft»b££fRU Rf#B=|»IfcF (g, b) £Bg-%X = ffiWC F (A, b) 
ft, MBf-^B, X5:iiE0^#{l!f^aiC^#t- 5^i£#M^fimi£fB^lg 

SteStlfcHf^B, XiC||^V>T, Ht-^X = ggmF (B, a) ©BB^O^fitt 
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, c) jkz$m^Y=mmF cb, C ) £&\m^c=mwF (a, c > 
b&-3-y=w«f ex, c) i:, m^z=mmn u, y, S ) h&#«>-&$E9!# 

B|f#Y = B|^F (C, b) &tfHgHfA = W»J (v, Y, g, Z) CD2otf>M 

£ -£ t? ^ £ £ £. "T § 3. - if fgfE > * -f- A „ 
[#g^©fNffl&S&0j!] 
[0 0 0 1] 

mswiz. *v h v - ? Kmmztit=.ny ^ ^ - $ *s XT^wmmiztett & 

[0 0 0 2] 
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[0 0 0 3] 

Z<D=L-^MUOytt$k&}te&ffi£. tt, Schnorrtf)#i£;tf£ne>;ftTV^ (C. P. 
Schnorr, "Ef f icientSignature Generation by Smart Cards, "Journal of Cryp 
tology, Vol.4, No. 3, pp. 161-174, 1991. „ ZOUffiT'lZ. mM^ltfttU 

[0 0 0 4] 

q «Bl, q I P-D t fiaq©S«eZp1ffe5. * fe, IiE0^#©^|§ii 
tt, v v = g~ s mod p) TfftS. SE^#(OS5afltti, sGZqtife 

L T v> £ © £ 1" s 0 
[0 0 0 5] 

7><rv°?l 3EW#ttSUR a €= Z q &£j«U 
A = g a mod. p 

^r-y^2 fciE#a:SURb (bGZq) 
IE BJ!#{C 

c=a+bs mod q 
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m 

a be , 

A = v g mod p 

•ftfotLt* & if e> & & h , &tfL"m\*uwm itJE m x$> z> n 

[0 0 0 6] 

z.t.ifi3$*.bti&&. z.(Dmm-r^t>-h^.~^rnu(D^^mz.'D\^x. 

CBB"tSfifl!r#J:<$3ie>*l , r V*<5 (S. Goldwasser, S. Micali, and C. Rackoff 
, "The Knowledge Complexity of Interactive Proofs," Proceedings of 17th 
synposium on Theory of Computing, pp. 291-304, 1985. „ ^ftHS'ffite, 

% & f z. t. x 3. - *r&u%&<D£±& tmu £ n & = 

[0 0 0 7] 

±facDSchnorr©igIiE#i£-e&, — Bff S^lEf Z> £ £ T?*ftl3KffiS:*i-S - 
fC&£ (A. Fiat and A.Shamir, "How to prove yourself: practical solution 
to identification and signature problems," Proceedings of Crypto' 86, 19 
80.#KO „ MtftWlZi*. mfcmizk&UM*: b<= {0, 1} fcLT£jSU -f 

nhn;i/$:o (log q) ek t/-->ryi/v;uzmft-t£ <fc ^izHtsE-tmt. 
og q) mmfiL. ±x(Dmftiz&^x. fcai^sa-rsfc&tf, 

[0 0 0 8] 
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A = g mod p 
7,tv~7 2 tfeSE#ttfL«be {0, 1} 

c = a + b s mod q 

* be j 
A = v g mod p 

[0 0 0 9] 

rcDi^fc, jtmtSimo (log q) • iciffltrrstf, *&8H£tt#$E3*i 

[0 0 10] 

l#i fctfrSfcLTfey, S£iB#fc;f*3E#fc©fia# 1 *f l t^n h 

ttiE#i: filmic ^"n hri;i/£lif?1-£^M# *&3K-l$#iRfca*iS« 

fiEJi&V^ (C. Dwork, M. Naor and A. Sahai, "Concurrent Zero-Knowledge, " 
Proc. Of 30 th ST0C, 1998. &M) . 
[0011] 

WWW (World Wide Web:r?-;i,K • CM F • ? x ^) Ttt, H 
TTP (Hypertext Transfer Protocol : WWWit-/ 1 ?- ^WWW^"^ ?if-£Web^ ? 
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[0 0 12] 

fgliE ^ n ^ A &IB« L fclBflWKft, ^ - if 383ESS & 3. - if fgfE J/^fAS 
[0 0 13] 

±!BBW&3£*ft"r*fcftlc#»lBfcJ:, SE0^#M^«©^i§^ v Mis t© 
ffl0StC'OVxT ; ?»j£«>fc8E8tg £MV\ v = F (g, -s) SriRfc-r^S — 
tt W» F «> £ *i, £E0^#M^fi £ ««<Z>fcfiE#flIS5fi t © ISf T?$EW#fi!l$l« 

mmmmmmte$mait$if&L. m^A=mmF ( g , a) 

(g, b) tm^X = mmF (A, b) OT#B, X£iEBJ?#$[=£SfC 

iSfb, BufHra#{i^Mtt, R£#X = B5»F (B, a) ©K^<«£tt£*l!E 
U miL?2>£tfimLf=.£glZ, SL»c3:£j£U ffi#C = ffii§:F (g, c) x 
tflt#Y = |H8tF (B, c) %t^*m^C = MmF (A, c) ^t>-Bf#Y = 

m^f (x, c) m^z=mmn (a, y, s > m&m^zftiM. 
mmmmizmmL. mmtkummmmizm^Y =mmF (c, b) ^m^A = 
mm j (v, y, g , z> ©2o®wffi#HB£jcj*3£LfcfcgK:, mm&u&w 

[0014] 

(q I P-1) (Dm&tmfc'tmf&P, &Bq0>7C«:t(r3E«EBgfcLT 
[0 0 15] 
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v = F ( g , — s ) = g modp 

(d m m * m t z. t £ 1. 1 s = 

[0 0 16] 

X = B mod p 

H (a, Y, s) = a + Y s mod q 

mmmm j it, 

Y 7 

J (v, Y, g, Z) =v g mod p 
[0 0 17] 

s»fc«E«gS:fflv\ v = f (g, — s) s»fc^£-;£rattg§«F#>i«>e> 

m& tc o v x T © IE ^tt £ &3E -T * rL - if fg§E <D tc #> (D U ^#f!f^Sffl ^ n ? ^ A 
W#fflU^«tC, SLRa flgF^A = W»F (g, a) 

, ^M$tl^Bir-^B, XfCSo^T, HgF#X = W&F (B, a) 

(g, c) x.z$m j %Y=mmF cb, c) *fct±iir&c=&«F (a, C ) 

&tf«F-*Y = 0B»F (X, c) m^Z=mmH (a, Y, s) 
[0 0 18] 

gftfefi»gS:ffl^, v = F (g, -s) SrStfe-r^S-^t^ffiMRF^ftb 
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z t m l t=. mmkummmw ic & v ^ x m ^ u «r m &f mm»-v & ^ t , mm 

m%imb&£z$$:m2tit~m^Aizm^^x, m^B=mwF (g, b) £f§# 
x=b9^f (a, b) mm^B, x^ummmmmizmm^^:. mm 
w%mmmfr*><Dm^c=mmF u, c) x.i$m-%Y=mmF (b, c) ^, 

£t=.im^C = m&F (A, c) ^t>*^-^Y = S5^CF (X, c) Sf#Z=K 
IH (a, Y, s) £&^fs2-g\ ^M2*l£Rir#C, Y, ZfcSo^T, Hf# 
Y=ilF (C, b) &Z$m^A = Mm J (v, Y, g, Z) <D2otf)g^#|f!I 

[0 0 19] 

S^Mg^K v = F (g, -s) &»fc^£-;£ftttgS»F#£#>e> 

HffilC o v> T ©lE^ffi £ mt^r Z> =l - if fgfEtf) » tf>IEB,H#<i^«ffl © =l - -if fg 
SE£S«tC;J3V*T, SL«a &£fifcU#olfc-JtA = W»F (g, a) 

x£^t-£^ff £tes*ifcflff#B f xjcs^t, ni#x = iwi£F ( 

ic sii«cS:^u^o, m^c=mmF u, c) aof«fY=s»F cb, 

c) fc, *fclil£-SC=|»#F (A, c) 2fctfBgHfY = W»F (X, c) fc, Pgp 
#Z=B|^H (a, Y, s) £&#&.g>BiH§1B##«fc, ffrfEft#C, Y, Z £ 

[0 0 2 0] 

£«>fcSf»g&Mv^ v = F (g, -s) &iefc^£-;£lRH£M»F#5£«>P > 
mmz o T <Z>IE^'f£ £ tfcliE-r -5 rL - if SgSECD «?)<D^|E#{iiS«M CD n - if 
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Sr^fiSLfro, K&&b33J:tfMS*lfcl«#AlCg^T, ft#B=KffcF ( 
g, b) £Bir-JfX = MmF (A, b) Sr^feT, mm^B, X &SEf5!#fl![ISSlC 
iHfit-^^M^ISi:, faf3iE0^»^g^?)©^^C = TOF (g, c) &OTr 
^Y = g|^F (B, c) t.. *fctt«P#C = B5«F (A, c) &«#Y = g@f& 

f (x, c) i:, m^z=mmn (a, y, s) fc&gfi-rsit-^SM^Si:, 

gMS.flfcHff-^C, Y, ZJCS^T, Bt#Y = B8mF (C, b) ^W^A = 
J (v, Y, g, Z) <8 2T3©W«j^l$lCj£l£Lfcfc£tC, ffrS3tfc3E#flJ 
i£fi ISflHSE W#fl9^iB© M«*«jE ^ T* & § &$E f § &$E#® *mXfcZ- 

[0 0 2 1] 
[0 0 2 2] 

fc<BM«lcov\T ; ?#>£«>fc!aE»g £Mv\ v = F (g, -s) — 

mm t. ^m^-mmn<D mm^ o v ^ t oiEm®. & mE-r & =l - if she s/ * -T a &c & 

V^T, SLifca &£#LfroH!F#A = K»CF (g, a) 3fc#)£Ri#A£^ 

Az&m+&ikummmnm&m¥&£. sL»b&£/*u b = sbissc f (g 
, b) tm^x^mmF (a, b) ^Pt-^B, x£$EHj?#{»Hgifiic£Ha 

(B, a) ©M#©^fi'f45:^IEt-^ra#M^ttffl^II^^, tSfiSJERiSfr & 
fcfcSEStifefc^JC, SL»c Bf#C = MiS[F (g, c) 

Y = W»F (B, c) fc, ^fc«Bf-^C = BB^F (A, c) &tfl£#Y=H»F 

(X, c) Bf#Z=|»ifcH (a, Y, s) £ 3M#{B!jg£SM^#?g 
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m^mt. mmm^mmmfr b&m^c, y, zzgm-tz&ummmmmm 
^^m^mt. m^Y=mmF cc, b> %.z$m^A=mmj u, y, g , z 

[0 0 2 3] 

iz*mw & mm v ^ <d x & z> „ 

[0 0 2 4] 
[0 0 2 5] 

xmrnnmnxiz, mmt-rzfr&xDmmt. LxmzB-t-xfaftmmF 

^ti^tucfcv^, flm ( + ) £fH3l (*) <D--D<DmMifi&&2toX 

~?ftt>%. &M<Da, biZMLX. 

© F (g, a + b) =F (g, a) *F (g, b) 

© A = F (g, a) fcfctf, F (g, a * b) =F (A, b) 

H (a, Y, s) = a + Y * s 
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o 

J (v, Y, g, Z) =F (v, Y) *F (g, Z) 
[0 0 2 6] 

©ftSiift&Mtt, ig& P, q ^ q I p-1 . ©Kfli&^U g <E z P # 

F(g, a)=g mod p 
[0 0 2 7] 

C PUm< ilt)^tf=i>t:a.-*JCj: U«^^tlfcliE^#f!liSg 1 0, t&3E 
#<Ulgtt4 0, &tf|ftaE#fll2&«4 0 i:ra«<0*^T?S>*ffi©ttiiE#flIigB6 0 

[0 0 2 8] 

HEWfi^fi 1 Ott, S/^f - ^ f SA*t« fcftCAASI 1 2£ 

1 6 tCgMfcStlTV**. SL«38£*# 1 4 tt, J*^U 1 6&tfSL«afc:a^J 
<Bf#A$r#5?)SBi#m»#|l 8JCg^£*lT^3 0 H&-Jf SIWS 1 8 tt, 

F3 0fC«, &§E|§2 OtfgMftStiT^S. - ©lfcl£## 2 0 te* =t U 1 6 fe&jft 
SftTV^S. &$E#§2 0&. A:fcfc/£C&a»c &»£rSSL»$6£#2 

SUR38£#2 2W:, SL$C c tcid < Bj§f#C, Y $:^^§Bf 2 6 (c 
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tC8M83*lT^5 0 B&#SI#«2 6, 2 8tt, if I / F 3 0 (Cgi^tl 

^^EU 1 6JC%SiK34XTV%S 0 
[0 0 2 9] 

tEflif 4 0 tt, *>*^A/^;*-*^£A:&^Sfc#>0>A;fr£SS4 2 £ 
flt^Tfey, A#=g«4 2ttA:fcJCjSCfcSL«b Sr»^-r 4 4&t>* 
*=EV 4 6izmMt$nT^Z 0 Sli&|§£#g4 4&, 4 6&tfSL«bJc£^5 

<Hf#B, X£#&3fft#^|t#§4 8 1C^M£*ITVn£o 1 8 te, * 

y h r? — ^ 3 2 £^LTf&©^Si:if§^££«MCMff I / F 5 6iCgM83*lT 
V^S. Ml/F5 6fCte, lfcliE##5 0#^£*lTV^ o £ CD*fcfiE3B 5 0t± ;* 

[0 0 3 0] 

MiEfiH6 0[j:, ±IH^U#MiSS4 0 i:|wia©«^T'^>^fc 

[0 0 3 1] 

«F g , ffilfif(JD^«liv = F (g, -s) , |IH^#©S^iltt s fcf So 
[0 0 3 2] 

aa»4ail4ICj:ota»aS:4jaU 8(CJ:oT, A = F (g 

, a) fcftJJU I/F 3 o *:iftLxm^A$:ifeu%-izmm-tz> 0 

10^x7^111 01©iEWf«IStlO©MPs 1, MlPs 10|g 

»n^itT i mb^-ts. 

[0 0 3 3] 

aSJt»^»4 4tC«koTa»b &^.fiJ5U, Sfb^Bf#A$:fflVNT, B = F (g 
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, b) £J:t>*X=F (A, b) &ff»U Mm I /F 3 0 &^L/TB|p-^B, X£ 

3^)^7 L ^^2« > Ell (D^|iE#ffi!f^«4 0#$MT 1 &gfel,fcf&©*UiQ s 

1, s 1 <3D*§*^ft>tl«Jt^T 2 iCfB^fSo 
[0 0 3 4] 

^fgLfcBf#B, X&JSV*T, tfc3ESS 2 0 JC «fc »J , X=F (B, a) *«fiJt35frS 

4 jc«fc»j M3;u&tf»»rrs. j*£-*5ifee>fcC, ft«c&£jau c = 

F (g, c) , &tfY = F (B, c) SrfMr-rs. fcfc, iOfflttt, C = F ( 
A, c) , Y = F (X, c) T&iV^ Z = H (a, Y, s) "r&Jbt. 

, z = a + Y* s z$mv, itmt^sc y, z&tfeSE#jcaHrr5 0 

^f^ait EI i ©SEMfltf^e i o^iiMT 2 iSibfeftcffliP s 

2, &tf«.JlP s 2©^SE#|2 0 lCj:<5tftiEA^3iUfc|g^*5*lSa^T 3 IC 

[0 0 3 5] 

3teLfcfflF#C, Y, Z&MV^T, 5 (HC J: *J , Y = F (c, b) fc<fct>* 

A=J (v, Y, g, Z) , -t&fc%A=F (v, Y) * F (g, Z) ^^-T 

n). f&xLLft^tgit. um^vstrtzm^-tz (*sasi*5 4^ 

I0Xf>y^4 11 Ell (D^fiE#f!l^S4 0#afiT3 &SHlfei©MQ s 
2{C^^-T^ 0 

[0 0 3 6] 

, #S6Slc»S«riB*7Dy I?—?-* h (FDU) 5:iibt, 7Q 
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e>}ClT=fe; J:V^ R OMfClB'H L T t> J: V*. fEMSft£ LTte 

, CD-ROM, MD, MO, DVD^r-f ^i'^DATt^f-^ 

U> m££MV^h£lCte, MtSgltLTCD-ROMgi, MD|g« 
, MOgE DVDif, D A Tigltlt^&M V^tUi <k V 1 *,, 
[0 0 3 7] 

IMT'fi, igp, q (££U q | p-1) £.&m<l<Dn.S fci/X^A/^ 
£Lt=.££K, mmF £IT v = F (g, -s) = g~ s mod p £Mv^ 
-r^t>t>, 0lttj$ti:, ±j*0>Schnorr£R;fi6(Z>fc©;g:JSv*S;i fc^fg 
liHillTH (a, Y, s) =a+Ys mod qfcfflV^ B5£t J 
tltJ (v, Y, g, Z) =v Y g Z mod p SrMV^^S. 
[0 0 3 8] 

i/XT&rt?*-* : lg«P, q (fc£U q|p~l) tffi»q©7Bg 
SE^#©^IW«t: v = g" s mo d p 

um&ammm s e z q 

[0 0 3 9] 

a <E Z q •••(!) 
A = g modp •••(2) 

irtjtt>^ mmmwmm i o-ei±, a»»4af 1 4 *«*/^f a;^^ - * q % 

Mv^T (1) 5£{C«o-<£[Jfca ££$;1-£ 0 fit, ffc^mJMS 1 8 tt, ftf>SL 
Sfca&tfS/^A^*-* p, g&Mv^ (2) 5£JC«fc »Jlf# A&#«>.5. r 
0>:£#>fc[©#Al±jiteI/F 3 OKltfJ^jStK *y h9-^ 3 2 £^ITME# 
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[0 0 4 0] 

b e z q • • • (3) 

B = g' 5 modp •••(4) 
X = A b mo d p • • • (5) 

iSfIil4 0t*it mmi/F 5 6 $:^LTBiP#?itWtl4 8 {C 
M##II£Sl Ofr^(DBi#A#A;fr£*l£o d<Z)£:£> 4&HE#{WSI*4 Ot'tt 
, SLIfc#§£3§4 4mfA;t7^-^ q fcfl^T (3) =£{C^cKM(b&£ 
ffc-tSo Rt#M3l#§4 8te, ^©&Jfcb&t>*Sf§L£Rif#A£M^T (4) , ( 
5) ^(CJ: UBt-^B ^ffi#X$:^i?)So ^ B , Xli®#I/F5 6 

(Cm^j^tl, *>y 3 2 ^^LttiEiflil 1 0 ^miSZ tl-5 0 

[0 0 4 1] 

x^^^3 : ummit. m-^B, xzm\<\ ?ko (6) ^^.iL-t^^^^v 

Z£*#>, Hir#C, Y, zzfou^mm-tZo 



X=B a mo d p • • • (6) 

c e Z q • • • ( 7) 

C= g C mo d p • • • (8) 

Y = B C mo d p • • • (9) 

if;liC = A C mod p • • • (10) 

Y = X c modp •••(11) 

Z = a+Ysmodq • • • ( 1- 2) 
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&ffl;frU ZfU bn)l**mz-ez> a (6) &&U1&&<D&& 

W7^-!? qlc£^<SL»c &^3-tir*„ i©SL»ctt, Hfil^2 6 

*-9 P, g^MVNTJifH (8) (9) 5£*fc«: (1 0) , ( 1 1 ) iC 

^oTBi^CilY #*^Bt#Y, &8 a , Mils. i/X^A 

q fcfl^T (12) (C^oTBf#Z $r^«b§ 0 iti P>^«b^Hf#C, 
Y, ZttiiMl/F 3 OJCmiJ^n, *y h 3 2 £^ LT*fcgE#ffi!lSlg4 

[0 0 4 2] 

: 4£fIE#tt, #Ctf> (12) , (13) M# 

Y = C b mo d p •••(13) 

Y Z 

A = v g modp •••(14) 

fflliSftlOfrexOifC, Y, Z#Aij£*l£ 0 tftSE#5 0li, Y, 
Z&tf:*^ U 4 6£3B«Lfc^*^AA9:*-#&MV>-t_t3E (13) St, ( 
1 4) tUc^oTIM-C, Y, z&tfttit-s. 
4&i£#§ 5 0li, (12), (13) S^^0«lliEJB*-eS>«»-&tCtt, # 

si«fi5 4SMat, uwmostTtzm^z* -is, taiEsssow:, .lib 

[0 0 4 3] 

, jtfeT 1 f$&CHf#A&C | p |, M-fsT 2 &HCB£#B, X}:<tS2 | p |, 
iifST 3 B£lCI©-£C, Y, ZiZ&Z 2 | p | £ | q | T*&£ (01*1) . Z.(D 
5 | p | + | q | ©frl^fcjffifeJfc-C.fcV^fclCfcS. Sfc, ItJISlCO 
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o 

[0 0 4 4] 

T3 (01*180 ©ra^-fiftKOafi^JSTJ&oTtj, ^CD^^^Bf-^ A, B, C 
, X, Y, Z^^|BE^gft««i^SS*i**fett»*fStiSii:t±«:<, 

[0 0 4 5] 

itztazmmznzijftX'tete^o zkdjs^jc*, n l^^, zn 

[0 0 4 6] 

J&V^dilW:, "? T*iZjSB*>tlT V*<6 (C. Dwork, M. Naor and A. Shai, "Concurre 
nt Zero-Knowledge, " Proc. Of 30th ST0C, 1998) 0 
[0 0 4 7] 

#mm*v hv-9T*i*&&e>mtt'r&*sEi3itiium (v 1, V2, • • •, 
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vn) racist;:, mw^p £mm-?zz.£tf*sffix*$>z> 0 tot, ummpt^ 

WLOtkUm (VI, V2, • • Vn) £©ra©3®te<0*&»te&#*.Si&g 
[0 0 4 8] 

fit, 2Mfc3ET?tt, «j&©^ftbfc^lE&^IiE# (VI, V 2, • • - , v 
ttftJCtt, ttift©^iEJ&tftlE# (VI, V 2, • • •, Vn) tCjfcfbT, 

(vi, v 2, • • •, vn) (Dmmftmnmm&tt tern-? o z. 
£t?i±, rrji^tv xj*s&mi&<?>um&p MkU& (vi, V2, • • v 

[0 0 4 9] 

-m&*ik?Z£&<, *IE&1£IE# (VI, V2, • • • , Vn) liMKb 

, &>T<D£$izmmmp£Mm't&z.mfeLX£^. ^ie# (vi, V2, • • 

•, Vn) $r^$E# (Gl, G2, • Gm) (m< = 

m&mtcmmizmrs^x. uwmp z.mm?z>z.t:ZMfeLx^z> 0 

[0 0 5 0] 

A#£IEBJ3#P©^ll§£t33J:t^>^AA^* (p, q, g, v) 
[0 0 5 1 ] 

Xf7^1 :M#P&, ffif#Al = g al , A2 = g a2 , • • An = g an 
mod p£ftHU f®-f§- (Al, A 2, • • An) ^-tl^ft, tftl£# 

(v i, v 2, • • • , vn) izmmtz. 
z<Dm&xikumtfmz>mmiz. view 0 = { ( P , q , g, v) , cai 

, A 2, • • • , An)} X$>Z> 0 
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[0 0 5 2] 

7.7"»j-t2.- 1 - P : G 1 iC/St" £-r^T©#?!2#V i \t % ^fgb£Hf# (A 1 
, A 2, • • • , A n) *>Mb, SURb i GZ q Ml, Bf-^B i (= g bi mo 
d p) £J:t>*Ri#X i (=Ai bi mod p) £ftHU 45*>*lfcHlF-J§- (Bi 

, xi) zum^pizmm^Zo 

[0 0 5 3] 

7s*rv-f2>- 1-V: ViGGi JCo^T, SEW#P tttftSE^ (X 

i=B ai mod p) ^yiCo^^Sr^SE-rs. 

%>uft»j:&Ttf, #t$E#vuc, (ci, Yi, zd &nrrs. 
z<Dm&-z\ &>u^tfmz>mm$. view 1 =view 0 u ( (Bi, xi 

, Ci, Yi, Zi) | V i GG 1 } 
[0 0 5 4] 

2<= k<= nlC^f It, Xf>y^2-k-P, 2 -k-V&SfcyagL 
[0 0 5 5] 

^-/^2-k-P : GkiCMt--5i"^T©^$E#V i tiu TftCftfeflMS 

V I EW k .^f., SLffcb i (GEZ q) . ££j&U B£#B i (= g bi mo d 
p) &t>*Ri-tX i (= A i bi mo d p) &#f#U »e>tlfeBff# (B i , X i 
) £M#PlCiitf§tS 0 

[0 0 5 6] 

^f»;^2-k-V : V iGEGk£$|£-r#i fCo^T. |E^#Ptt^$E^ (X 
i=B ai mod p) tfJ&ytfoj&^fr&tMEtS. 
fcURUSTtf, ^!E#V i tC, Bff# (C i, Y i, Z i) &Ift5. 

cioiSj&T?, tftumtfrnzmmit, viEw k =viEw H u ( (Bi, x 

i, Ci, Yi, Zi) | V i GEG k } T*2bZ> 0 
[0 0 5 7] 

sum z. t. {cisit -r s fc$E### * mm it 

V I EWn= { (p, q, g, v) , 

(A 1 , A 2, • • • , An) , 
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(B 1, B 2, • • • , B n) , 

(XI, X2, • • • , Xn) , 

(C 1, C 2, Cn), 

(Y 1, Y2, • - • , Yn) , 

(Z 1 , Z 2, • • • , Z n) } 

[0 0 5 8] 
ttitt IC 33 S #m*«MK£] 

_tfaX5^y ^"2 - k - VfCfeV^ #ilC#fLT. 

3. i 

X i = B mod p 

sto » tea, «ise#v i ttfire>^©a»b i e zq^^t, 

Bi=g bl mod p fcJ;^Xi=Ai l)1 mod p 

[0 0 5 9] 
[b-awareness assumption : J£ATB A A] 
ffift©*fc3E#V i {C#f IT, ±UXt»j°?2 - 1 - V, 2-2-V, • • •, 
2-n-VtC^T, (B i, Xi) ©ft < , SLiSt b iCD-fit^m 

[0 0 6 0] 

SrSEE-TSifctfTf^S. J/5aU-*SttttKf (VI' , V2' , • • •, 

b i ©ffi&jftUS'tS -5. 
[0 0 6 1 ] 
[ >> ^ a 1/ - # - © 7 ;b if U X A] 
A:£ : ^Hfilt v, i/T^T^n^* — # p , q, g 
ffi*=VI EW n = { (p, q, g, v) , 
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(A 1 , A 2, • • - , An) , 
(B 1 , B 2, ■ • • , B n) , 
(X 1 , X2, • • • , Xn) , 
(C 1 , C 2, • • • , C n) , 
(Y 1, Y2, • • • , Yn) , 
(Z 1 , Z 2, • • • , Z n) } 

[0 0 6 2] 

Xf7^1 :±TG>i (K=i<=n) ICo^T, SLffcY i <E Z q , Zi 
<E Z q «r£j*U A i = V Yi g Zi £ff5|-r3 0 r©H*T'S^ 

View 0 =[(p, q, g, v), (A 1 , A2, • • An)] 

7.^rv ^2 - 1 - P : G 1 £ "tlXtolkU&V i (V i ' ) ^H^f^o 

-3*»J, #V i ICV I EWq^A^L, (Bi, Xi, bi) £ft 
Ht-tSo rtf>££, Bi=g bi mod p^»Ji£-3. 
-1-V: Yi=Ci bl mod p £$§£-#-C i %:%\%-tZ> a ZL(D 
m&T\ S#S/$aU- hbfcfiNRtt, VIEWp 

VIEWqU {(Bi, Xi, Ci, Yi, Zi) | ViGG 
1} 

[0 0 6 3] 

2<= k<= nC^bt, -72 - k - P, 2-k-V&»»Jjg , r. 

[0 0 6 4] 

^7 L ^^'2-k-P : GklCM-r-5-r^T(Z)^SE#V i (V i ' ) S^ffTS. 

o£*J, #Vii:VIEW H 5:A*l, (Bi, Xi, bi) % 
fffHt-TS. r<£>££, Bi = g bi mod ptfjfcy&o. 
Xf>y^2-k-V :Yi=Ci bl mod p £^£-TC i &fHM*S. 

B£j&T?, S*«J/5al/-Mfefllitt, VIEW k =VIEW H 
U {(Bi, Xi, Ci, Yi, Zi) | V i €EG k ) 
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[0 0 6 5] 

Mife&)izis*=Li;- hznzmmftnv i Ew n », m^um^p t cvi 

, V2, • • •, Vn) <D&mft&<Dmftftl6 lot, **l!fflM£# 

[0 0 6 6] 

j^_ti&JE l tc ± e> jc*» w ic j: n «, ieb^#m^s t &iE#$!iigfi £ © nts 

#fC, >f h&£f<£>#l«f»§*y h>7-?^bT, 3EIJB#flff£SiB#« 

CHI] 

[02] 

[03] 
[04] 

IlEfJ&#i:4&iI#£# l M l tmtSi i: «:3iHI!-rsfctf>0>SiWei"e&S. 
[0 5] 

i o ummmmm 
i 2 A^^a 
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mm 
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C, Y. Z 
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[0 2] 



SLR a 



12 

-14 



20 



o+ ^ -18 
»«• B,X 



A X04MD 
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CH3] 




( a€2q ) 



A=g a nod p 



c=a+bs nod q 





P. q. S 






: „ 


Ukb<0jg£ 

(b€Zq) 






' ! — * 


b r 

A=v w g u mod p 


r 
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[05] 
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mm: 

iB&^ffl ^nh3MXf'yyit\ ummioit. SLR a fC J:S A= F 
(g, a) £ff*UT&iiE#tcaMrrs («HPsl, SiTl) . Xf^2 
T\ JfctE#4 Ott, SL»blCj:SBff-^B = F (g, b), X=F (A, b) fcff 

X=F (B, a) tfjifcfcffi&teSEU *^iiJ&e>«^n Nn;i/S:*Wfb, 
*>tf, SLBt c £ J: «& C = F (g, c) , Y = F (B, c) &ff-J*Lfctfe, Z = H 
(a, Y, s) §ffIU ^SE#lC^fgt-^ (fi!Ps2, IfT3) . *r*J 
74X°. ^SE#tt, Y = F (C, b) £<fctfA=J (v, Y, g, Z) tfJEfcftffi 

"T& (t&MQ s 2) „ 
[5B#B] EI 1 
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mm* 



#0 2000-099867 
50000412658 



Mm KB 2 3 19 

12^ '5 £ 3 1 0 



[#fFffiJSSA] 

CfWIA] 
[ftJSAJ 

[Qiffixtemffi] 

Ca«EL/fet!tf^aA3 



390009531 

7^'JMH1 0 5 0 4, la-a-^ffl r 
100086243 

#j§S;riJR^:fDrPT«Sra 1 6 2 3#i& 1 4 H^T 
100091568 

#3&/f|JR*5farfJTttl8f 1 6 2 3 1 4 0^CT 

^iSA 

100079049 

*^#ir?iKif?i4TS3#l 7# HK$Tf§tf 
100084995 

J«#fT?il2§T?§4Tg3§l 7# H K#r?ii 
100085279 
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M^ummmmmmr a 3 # 1 7 # h K$rfi 

100099025 

3*jRfP§r?g|£#r?§4Tg3#l 7# HKifr^tf 
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m m a 



m%m^ (3 9 0 0 0 9 5 3 1) 

1. ^J5¥^H 1 9 9 0^10^240 

ft ffi T^'J*^*ai 0 5 04, T-^>^ ( 

2. 2 0 0 0^ 5|16H 

ft m vjtj&mmi o 5 o 4, -3.-3-^1 ( 
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